nixos/sssd: remove unnecessary capabilities

2026-02-04 22:04:31 +01:00
parent 0a96231f28
commit bcadb5d44f
1 changed files with 0 additions and 9 deletions
@@ -158,18 +158,9 @@ in
          NotifyAccess = "main";
          PIDFile = "/run/sssd.pid";
          CapabilityBoundingSet = [
-            "CAP_IPC_LOCK"
-            "CAP_CHOWN"
            "CAP_DAC_READ_SEARCH"
-            "CAP_KILL"
-            "CAP_NET_ADMIN"
-            "CAP_SYS_NICE"
-            "CAP_FOWNER"
            "CAP_SETGID"
            "CAP_SETUID"
-            "CAP_SYS_ADMIN"
-            "CAP_SYS_RESOURCE"
-            "CAP_BLOCK_SUSPEND"
          ];
          Restart = "on-abnormal";
          StateDirectory = baseNameOf dataDir;